Privacy Policy

Last updated: 5 November 2026. This policy explains what information EneDaw collects when you use enedaw.com or the EneDaw app, why we collect it, and the choices you have.

1. What we collect. When you order: your name, phone number, delivery address (block, road, house, flat and gate note) and the items you buy. When you create an account: your verified phone number, your name, your email address and a password (stored only in hashed form). From your device: a device identifier and basic technical details such as browser, screen size, language and IP address. When you contact us: the messages you send. We do not collect card or bank details, because payment is cash on delivery.

2. Why we use it. To take, prepare and deliver your orders and to let the rider call you about them. To show you order status and, when available, the rider's location while your order is on the way. To run your account, send one-time codes by SMS or email, and let you reset your password. To prevent fraud and abuse, including limiting the welcome gift to one per person, phone number and device, and blocking fake orders. To handle complaints, refunds and legal obligations. To understand how the service is used and improve it.

3. Legal basis. We process your information to perform the contract you enter into when you order, to meet legal obligations, and for our legitimate interest in running a safe, fraud-free service.

4. Who sees it. Our riders see only what they need to deliver your order: your name, phone number, address and items. Our staff see order and account records to run the service. We use trusted service providers to operate EneDaw: cloud hosting and database (Supabase), SMS delivery (Alpha SMS), email delivery (Resend), bot protection (Cloudflare) and website hosting. They process data on our instructions and only to provide their service. Some of these providers store data on servers outside Bangladesh. We do not sell or rent your personal information to anyone.

5. Cookies and device storage. We use cookies and your browser's storage to keep your cart, your saved address, your sign-in session and a device identifier used for fraud prevention. We do not run third-party advertising trackers. You can clear this storage in your browser at any time; your cart and saved address will then be forgotten.

6. How long we keep it. Order records are kept as long as needed for accounting, disputes and legal requirements. Account details are kept while your account is active. If you delete your account, your profile is removed from active use and your orders are kept only as anonymised business records. One-time codes are deleted after they expire.

7. Your choices. You can order as a guest without an account. In your account you can view and update your name, email, addresses and password, and delete your account. To change the phone number on your account, or to ask for a copy or deletion of your information, contact us through the Contact us page. We will verify your identity before acting.

8. Security. Your data is stored on secured servers with access controls, encrypted in transit, and protected by rate limits and bot checks. Passwords are hashed and never visible to us. No system is perfectly secure, so please keep your password private and tell us immediately if you think your account has been misused.

9. Children. EneDaw is for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has ordered through EneDaw, contact us and we will remove the data.

10. Changes and contact. We may update this policy; the date at the top shows the latest version. Questions about privacy can be sent through the Contact us page.